Privacy Policy

1. Subject

This Privacy Policy (hereinafter referred to as the “Privacy Policy”) provides information on how “Cherry Advertising” EOOD (hereinafter referred to as the “Provider,” “Controller,” “we,” and/or “us”), owner/operator of the website: https://cherry-adv.net (hereinafter the “Website”), collects, processes (including but not limited to storing), and protects personal data of data subjects such as the users of the Website and the services provided (hereinafter “User(s),” “You,” and/or “Your”), and outlines the rights of these individuals regarding their data.

The term “personal data” used in this Policy has the meaning defined by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), i.e., any information relating to an identified or identifiable natural person (“data subject”).

You can find the following in this document:

  • Details of the Provider;

  • Competent supervisory authority;

  • Legal grounds for processing personal data;

  • Purposes of data collection and processing;

  • Principles of data processing;

  • Types of personal data we collect;

  • Retention periods;

  • Access to and sharing of personal data;

  • Rights under the GDPR.

2. Provider Information

Name: Cherry Advertising EOOD
Company ID (UIC): 207484584
Registered Address: Sofia, Lyulin District, Bl. 303, Entrance A, Floor 5
Phone: 0800 900 60
Email: office@cherry-adv.net
Registry: Registered with the Bulgarian Commercial Register at the Registry Agency.

3. Supervisory Authority

Name: Commission for Personal Data Protection of the Republic of Bulgaria
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592
Phone: +359 2 915 3 518
Email: kzld@cpdp.bg
Website: www.cpdp.bg

4. Legal Grounds for Processing

We process your personal data solely in connection with our activities and in compliance with applicable legislation, including the Bulgarian Personal Data Protection Act and the GDPR. Processing is based on one or more of the following legal grounds:

  • Your explicit consent;

  • Performance of a contract;

  • Steps taken at your request prior to entering into a contract;

  • Compliance with a legal obligation;

  • Our legitimate interest in conducting business.

5. Purposes for Data Processing

We collect, process, and store personal data for the following purposes:

  • Communication and identification during service or sales contract execution;

  • Processing inquiries, orders, reservations, returns, or refunds;

  • Compliance with legal obligations (e.g., tax law);

  • Accounting and administrative purposes;

  • Fulfilling duties to public authorities (e.g., NRA, Ministry of Interior);

  • Data retention for legal defense and improving the Website;

  • Ensuring information security;

  • Statistical analysis of site usage;

  • Sending targeted advertising based on user interests;

  • Recruitment and selection of personnel;

  • Sending newsletters and push notifications.

If you do not provide the required data, we may be unable to deliver the respective service or fulfill legal obligations.

6. Principles of Processing

We adhere to the following principles when handling personal data:

  • Lawfulness, fairness, and transparency;

  • Purpose limitation;

  • Data minimization;

  • Accuracy and data quality;

  • Storage limitation;

  • Integrity, confidentiality, and security.

7. Personal Data We Collect

Depending on the purpose, we may collect:

  • Identifying data (e.g., name, phone, email);

  • Payment and invoicing data;

  • Delivery address (if provided);

  • Data for newsletters and promotional content;

  • Job application data (e.g., resume);

  • Technical data (e.g., IP address, browser settings, language preferences);

  • Other voluntarily provided data necessary for contract execution or service delivery.

We use cookies to improve user experience. For more information, refer to our Cookie Policy.

We do not collect special categories of personal data (e.g., race, religion, sexual orientation) and do not engage in automated decision-making or profiling.

We do not knowingly collect data from children under 14 without parental or guardian consent.

8. Retention Periods

We retain your data only as long as necessary to fulfill the purposes stated or as required by law. For example:

  • Contact form data: retained until your request is processed + up to 1 year;

  • Client contract data: up to 10 years after tax reporting year;

  • Invoicing data: up to 10 years after tax reporting year;

  • Supplier/partner data: same as above;

  • Recruitment data: up to 6 months post-process unless extended with consent.

If legal claims are expected, retention may be extended. Upon expiry, your data will be securely deleted or destroyed.

9. Access and Third-Party Sharing

Access is limited to staff, representatives, and partners who need the data to fulfill legal or contractual duties. Data may be shared with:

  • Accountants and legal advisors;

  • Cloud service providers;

  • Postal and courier companies;

  • IT and hosting providers;

  • Marketing service providers.

We do not transfer your data outside the EEA or to international organizations unless required by law.

10. Your Rights as a Data Subject

At any time, you may exercise the following rights (within legal limitations):

  • Access: Know what data we hold and obtain a copy;

  • Rectification: Correct inaccurate or incomplete data;

  • Erasure (Right to be Forgotten): Request deletion where applicable;

  • Restriction: Limit how we use your data;

  • Data Portability: Receive your data in a machine-readable format;

  • Objection: Object to processing, including for marketing;

  • Withdraw Consent: At any time, without affecting prior processing;

  • No Automated Decision-Making: Not to be subject to automated decisions.

To exercise any of these rights, email us at: office@cherry-adv.net

If your request requires us to verify your identity, we may ask for additional information.

If your data is shared with third parties, we will forward your request to them where required.

We reserve the right to charge a reasonable fee or refuse manifestly unfounded or excessive requests.

11. Complaints

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority listed in section 3 or pursue legal action.

If our Website contains links to third-party websites, we advise reviewing their privacy policies, as we are not responsible for how they handle your data.

We reserve the right to update this Privacy Policy at our discretion and whenever deemed necessary.